Tvos

tvos

Vendor: Apple • 2,005 CVEs

CVEs (2,005)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3192 3Apple GoogleRedhat 9Chrome Enterprise Linux Desktop SupplementaryEnterprise Linux Server Supplementary+6 more May 6, 2026 Oct 8, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote...Show more Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2014-4422 1Apple 2Iphone Os Tvos May 6, 2026 Sep 18, 2014 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechani...Show more The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbers.Show less
CVE-2014-4421 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 1.9 LOW· v2 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via...Show more The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371, CVE-2014-4419, and CVE-2014-4420.Show less
CVE-2014-4420 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 1.9 LOW· v2 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via...Show more The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371, CVE-2014-4419, and CVE-2014-4421.Show less
CVE-2014-4419 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 1.9 LOW· v2 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via...Show more The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371, CVE-2014-4420, and CVE-2014-4421.Show less
CVE-2014-4418 1Apple 2Iphone Os Tvos May 6, 2026 Sep 18, 2014 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted...Show more IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than CVE-2014-4388.Show less
CVE-2014-4415 1Apple 3Iphone Os SafariTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4414 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4413 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4412 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4411 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4410 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4408 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafted call.
CVE-2014-4407 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes crafted IOKit function cal...Show more IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes crafted IOKit function calls.Show less
CVE-2014-4405 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted...Show more IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.Show less
CVE-2014-4404 1Apple 3Iphone Os Mac Os XTvos Apr 21, 2026 Sep 18, 2014 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
CVE-2014-4389 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments.
CVE-2014-4388 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted...Show more IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than CVE-2014-4418.Show less
CVE-2014-4383 1Apple 2Iphone Os Tvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header.
CVE-2014-4381 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Sep 18, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application.

Previous 1...969798...101 Next